ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 42 - ChromeOS Administrator discussion

Report
Export

What is a best practice for admin accounts on the Google Admin console?

A.
Super Admins should be used for all changes to the domain
Answers
A.
Super Admins should be used for all changes to the domain
B.
Group Admins should have 2FA enabled only if given security policy controls
Answers
B.
Group Admins should have 2FA enabled only if given security policy controls
C.
Super Admins should use a separate user account tor day-to-day activities
Answers
C.
Super Admins should use a separate user account tor day-to-day activities
D.
Group Admins should have access to multiple groups
Answers
D.
Group Admins should have access to multiple groups
Suggested answer: C

Explanation:

The principle of least privilege dictates that users should only have the minimum access necessary to perform their job functions. This applies to super admins as well. Using a separate user account for daily activities reduces the risk of accidental misconfiguration or unauthorized changes due to the elevated privileges associated with the super admin role.

Security:By using a separate account,super admins limit the potential attack surface in case their regular account is compromised.

Accountability:It's easier to track actions and changes when different accounts are used for different purposes.

Recovery:If the super admin account is locked or disabled,having a separate account allows for easier recovery.

asked 18/09/2024
Luyanda Hatta
34 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first